CVE-2025-0960

Description

AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving remote code execution on the affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-08 ↗
• https://community.automationdirect.com/s/cybersecurity/security-advisories ↗